---
id: 8636
title: "[CVE-2020-6831] Exploiting Android Messengers with WebRTC: Part 2"
cve: CVE-2020-6831
source_domain: projectzero.google
source_url: "https://projectzero.google/2020/08/exploiting-android-messengers-part-2.html"
published_at: "2020-08-05T00:00:00Z"
tags: ["android", "cve", "webrtc", "exploit-development", "project-zero"]
phying_url: "https://phying.com/item/8636"
lang: en
---

# [CVE-2020-6831] Exploiting Android Messengers with WebRTC: Part 2

## Summary

I started off by going through WebRTC bugs I had filed in the past to see if any had the potential to break ASLR. Even if a bug was fixed long ago, it is an indicator of where similar bugs could potentially be found. One such bug was CVE-2020-6831, which is an out-of-bounds read in usrsctp.

## Intelligence Metadata

- **Sources:** projectzero.google
- **CVE:** CVE-2020-6831
- **Published:** 2020-08-05T00:00:00Z
- **Original:** https://projectzero.google/2020/08/exploiting-android-messengers-part-2.html
- **Phying News:** https://phying.com/item/8636